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Preface 


The Missouri State Highway Patrol Criminal Justice Information Services (CJIS) Divi- 
sion developed the Policy Compliance Review (PCR) program in the fall 2008 following a 
requirement by the Federal Bureau of Investigation (FBI) and the National Crime Prevention 
and Privacy Compact Council (Compact). The PCR program is based on the same guiding 
principles used by the FBI’s National Crime Information Center (NCIC) audit program and 
is designed to assess agency compliance pertaining to the receipt of criminal history record 
information obtained through fingerprint submission for non-criminal justice purposes. The 
CJIS Division conducted the first policy compliance reviews in March 2009 with Missouri 
state agencies. 


The PCR manual provides guidelines for the receipt of criminal history record informa- 
tion obtained for employment or licensing purposes, or pursuant to other authorized use as 
authorized by state or federal law, for non-criminal justice purposes. The PCR pertains to 
fingerprint-based criminal history records derived from the systems of the Missouri State 
Highway Patrol and the United States Department of Justice. The PCR program establishes 
a quantitative assessment based on review of records and agency policy and procedures for 
use, dissemination, maintenance, security, and destruction of criminal history record informa- 
tion. The program also will provide concrete information to support developments in future 
criminal history record information training, program enhancements, management practices, 
and policy development. 


The PCR program is managed by the CJIS Division of the Missouri State Highway Pa- 
trol. Programs and qualified entities that may be involved in the PCR process include, but are 
not limited to the following: 


¢ Missouri Volunteer and Employee Criminal History Service (VECHS) program 
qualified entities, 

¢ Missouri state agencies, 

¢ Missouri courts, 

¢ Missouri municipalities, and, 

¢ Missouri law enforcement agencies. 


The PCR will serve as a tool to verify the appropriate use, dissemination, maintenance, 
security, and destruction of state and national criminal history record information provided 
by the Missouri State Highway Patrol for compliance of applicable laws, policies, rules, and 
regulations set forth in Missouri statute, federal law, and the Generally Accepted Government 
Auditing Standards (GAGAS). 


This manual outlines the PCR process before, during, and after an agency review of state 


and federal criminal history record information, and will provide a clear perspective on the 
tasks conducted by the auditors. 
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Policy Compliance Review 
Point Of Contacts: 


Criminal Justice Information Services (CJIS) Division 
Program Support Services Section 


Captain Timothy P. McGrail 
(573) 526-6160 


Mr. Timothy Schlueter, Assistant Director 
(573) 526-6263 


Mr. Kyle Comer, Senior CJIS Manager - CJIS Audit Unit 
(573) 526-6278 


PCR Team Auditors 
Telephone Number: (573) 526-6153 
Region 1 
Ms. Linda Lueckenhoff, extension 2630 
Email: Linda.Lueckenhoff@mshp.dps.mo.gov 
Region 2 
Ms. Valerie Hampton, extension 2655 
Email: Valerie. Hampton@mshp.dps.mo.gov 
Region 3 


Ms. Pamela Aberle, extension 2625 
Email: Pamela.Aberle@mshp.dps.mo.gov 
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PCR Team Regions 





ST. LOUIS CITY 
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Use Of Criminal History Information 


The use of criminal history record information derived from the systems of the Missouri State 
Highway Patrol and the United States Department of Justice is determined by state statute or federal 
legislation. Fingerprint submission is required for receipt of Missouri closed criminal history record 
information and for the receipt of federal criminal history record information. 


Criminal history and identification records obtained from the Missouri State Highway Patrol and 
the Federal Bureau of Investigation (FBI) shall be used solely for the purpose for which they were 
obtained. A current record should be requested when needed for a subsequent authorized use; there- 
fore eliminating the chance of using old or out-of-date record information for a new or current pur- 
pose. 


Employers obtaining state and federal criminal history record information must notify the indi- 
viduals fingerprinted that the fingerprints will be used to check criminal history record information 
obtained from the systems of the Missouri State Highway Patrol and the United States Department 
of Justice or FBI. 


Applicants must be afforded the opportunity to complete or challenge the accuracy of the infor- 
mation contained in the record. The applicant also must be advised of procedures for obtaining a 
change, correction, or updating of a Missouri or federal identification record. If the record is a Mis- 
souri record, the applicant may contact the Missouri State Highway Patrol for assistance. If the re- 
cord was reported by the FBI, guidelines are established in Title 28, Code of Federal Regulations 
(CFR) Sections 16.30-34. Generally, if the record was reported by the FBI, the applicant should 
contact the agency that reported the information. Specific procedures are outlined in Title 28 CFR, 
16.34. 


Dissemination Of Criminal History Record Information 


With all authorized dissemination, a dissemination log shall be maintained from the time of au- 
thorized dissemination until the agency receives a successful Policy Compliance Review. PCRs are 
conducted on a triennial basis; therefore, all dissemination logs shall be maintained from the time of 
the initial PCR until the next PCR cycle. 


A dissemination log may be kept in different formats. Some of the general dissemination logs are 
maintained on a Microsoft Excel spreadsheet. However, a copy of the correspondence that accompa- 
nies the record dissemination also may serve as a dissemination log if kept in the applicant file or is 
accessible to the auditor upon request. 


The log should contain two forms of information for all authorized dissemination. The first part 
should identify the record being disseminated and should include: 


¢ The name of the subject of record (last, first, middle initial); 


¢ The date of birth of the subject of record; 
¢ The social security number (optional) of the subject of record; 
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¢ The agency name (qualified entity) releasing the record; and, 
¢ The date released. 


The second part of the log should indicate to whom the record is being provided and should include: 


¢ The name of the person requesting the record; 

¢ The requesting agency and address of the requesting agency; 

¢ The purpose for the record request; and, 

¢ Signature of the person signing for the record (if mailing the record, the name, title and ad- 
dress of the authorized recipient). 


If the dissemination is for the subject of record, only the subject of record may pick up his/her re- 
cord. A valid photo ID should be shown prior to release. 


Violations and associated penalties for misuse of dissemination practices are stated in Section 
43.532 and Section 43.540 RSMo. 


Security Of Criminal History Record Information 


The criminal history record information shall be maintained in a secure records environment. A 
secure records environment can be a locked or secure area, free from public or unauthorized access. 
The records also may be kept in a locked file cabinet or safe. The important factor is to ensure lim- 
ited and controlled access. 


Based on a recommendation from the FBI, all personnel having access to criminal history record 
information should have a state and federal background check conducted prior to having access to 
confidential record information. 


Maintenance (Retention) Of Criminal History Record Information 


Criminal history record information may be retained in hard copy format and electronic format. 
Criminal history record information needs to be retained only for the length of time it is needed. Pur- 
suant to the CJIS Security Policy, the records shall be stored for extended periods of time only when 
they are key elements for the integrity and/or utility of case files. Therefore, if it is not an agency re- 
quirement, the hard copy record information may be destroyed. 


Electronic storage of criminal history record information is allowed. For all electronic retained 
record information, the system which houses the records should be protected with a password or en- 


cryption, and with a tracking mechanism, and contain separate file folders within the system in order 
to prevent unauthorized access to the records. 


Destruction Of Criminal History Record Information 


Criminal history record destruction should be completed in a manner to ensure that any and all 
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confidential or identifying information is no longer attainable. Recommended methods of destruction 
include shredding or burning. 


It is recommended that an agency conduct in-house shredding of criminal history record informa- 
tion or that agency personnel supervise the destruction of the records if an agency uses a contracted 
vendor. If criminal history record information is allowed outside the controls of the authorized agen- 
cy, it becomes an outsourcing standard requirement. 


Example 1: The agency has a contracted destruction service and provides locked bins for the 
housing of criminal history records to be destroyed. The contractor picks up the 
bins, and leaves new, empty bins. Is this acceptable? No. This would require an 
outsourcing standard. 


Example 2: The agency has a contracted destruction service that provides locked bins for the 
housing of criminal history records for destruction. The contractor picks up the bins 
and shreds in view of agency personnel. Is this acceptable? Yes. 


Example 3: The agency destroys all criminal history record information in-house. The agency 
keeps the shredded information in a bin for pick up by a contracted vendor. Is this 
acceptable? Yes. 


Outsourcing 


Outsourcing incorporates the process of a third party to perform non-criminal justice administra- 
tive functions relating to the processing of criminal history record information (CHRI) maintained in 
the Interstate Identification Index (IID), subject to appropriate controls, when acting as an agency for 
a governmental agency or other authorized recipient of CHRI. 


The Compact Council published a Final Rule in the Federal Register regarding a Security and 
Management Control Outsourcing Standard, which became effective December 15, 2005. The goal 
of the Outsourcing Standard is to permit the outsourcing (delegation of non-core operations from 
internal production to an external entity specializing in the management of that operation) of non- 
criminal justice functions related to processing criminal history record information from III. The 
Outsourcing Standard permits a governmental agency or other authorized recipient of criminal his- 
tory record information to select a private or governmental agency to perform these non-criminal 
justice administrative functions on behalf of the governmental or authorized agency, subject to ap- 
propriate controls. 


The Outsourcing Standard establishes minimum standards to ensure that security and privacy 
requirements are satisfied when conducting FBI criminal history records checks for non-criminal 
justice purposes. The contracting parties may not reduce these minimum standards; however, they 
may adopt more strict standards than required. To ensure agencies follow these minimum standards, 
the Outsourcing Standard provides that contracts and agreements authorized by this rule “shall in- 
corporate by reference a Security and Management Control Outsourcing Standard approved by the 
Compact Council after consultation with the United States Attorney General”. This document is for 
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contractors having access to criminal history record information on behalf of an authorized recipient 
for non-criminal justice purposes as well as contractors that only pass or channel non-criminal jus- 
tice criminal history record check requests and results between the authorized recipient and the FBI. 


The Outsourcing Standard identifies duties and responsibilities for adequate security controls be- 
tween the authorized recipient and the contractor in order to maintain the security, accuracy, and re- 
liability of the III system and criminal history record information. Missouri governmental agencies 
that obtain national criminal history record checks for non-criminal justice purposes under an ap- 
proved Public Law 92-544 statute may utilize the Compact Council’s Outsourcing Standard to permit 
a contractor or contractors to perform the administration of non-criminal justice functions associ- 
ated with national criminal history records on behalf of the authorized government recipient. This 
includes forwarding the FBI record to a third party subcontractor to determine employment or licens- 
ing eligibility at the lowest agency level. 


For more information on the Outsourcing Standard, please contact the state compact officer at 
the following address: Captain Timothy P. McGrail, director, Criminal Justice Information Services 
Division, Missouri State Highway Patrol, 1510 E. Elm Street, P. O. Box 9500, Jefferson City, Mis- 
souri 65102. 


Fingerprint Submission — Chain Of Custody 


The National Crime Prevention and Privacy Compact Council (Compact Council) is a 15-mem- 
ber body of local, state, and federal governmental officials, which prescribes system rules and proce- 
dures for the effective and proper operation of the Interstate Identification Index (III) for noncriminal 
justice purposes. 


In recent years, the demand for fingerprint-based background checks for noncriminal justice pur- 
poses has increased. Fingerprinting agencies and contractors alike have expressed concern that ap- 
plicants with a criminal history record may have someone pose as the applicant for fingerprinting 
purposes. Based on the Compact Council’s Best Business Practice, it is recommended to request and 
obtain photographic identification when capturing an individual’s fingerprints. Do not provide the 
fingerprint card to the applicant to submit, as the applicant could alter the card. 


Primary And Secondary Identification 


Currently, most agencies request some type of photo identification card as one method for verify- 
ing an individual’s identity. The Compact Council suggests agencies accept only current, valid, and 
unexpired picture identification documents. As a primary form of picture identification, an applicant 
may present a state-issued driver’s license, which meets the requirements of Public Law 109-13, 
when being fingerprinted. However, in the absence of the driver’s license, applicants may provide 
one or more secondary documents including: 


¢ A State Identification Card (if the state’s identification card standards are the same as for 


the driver’s license); 
¢ State Government Issued Certificate of Birth; 
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¢ U.S. Active Duty/Retiree/Reservist Military Identification Card (000 10-2); 
¢ U.S. Passport; 

¢ Federal Government Personal Identity Verification Card (PIV); 

* Department of Defense Common Access Card; 

¢ US. Tribal or Bureau of Indian Affairs Identification Card; 

¢ Social Security Card; 

* Court Order for Name Change/Gender Change/Adoption/Divorce 
¢ Marriage Certificate (Government Certificate Issued); 

¢ U.S. Government Issued Consular Report of Birth Abroad; 

* Foreign Passport with Appropriate Immigration Document(s); 

* Certificate of Citizenship (N560); 

* Certificate of Naturalization (N550); 

e INS I-551 Resident Alien Card issued since 1997; 

¢ INS I-688 Temporary Resident Identification Card; or, 

¢ INS I-688B, I-766 Employment Authorization Card. 


Secondary Identification Data Support Documents 


When validating the authenticity of secondary identification documents and forms, the data and 
information may be supported by at least two of the following: 


¢ Utility bill (address), 

* Jurisdictional Voter Registration Card, 
* Vehicle Registration Card/Title, 

¢ Paycheck stub with name/address, 

¢ Jurisdictional Public Assistance Card, 
¢ Spouse/Parent affidavit, 

¢ Canceled check or bank statement, or, 
¢ Mortgage documents. 


When an agency has a reason to believe an applicant has presented fraudulent information, agen- 
cy personnel should contact local law enforcement. No attempt should be made to detain or pursue 
the person. 


Suggested Chain Of Custody Procedures 


An agency may employ a process to protect the integrity of the applicant’s fingerprints when they 
are forwarded to the state’s central repository. The following information provides a guide to devel- 
oping a chain of custody process: 


* Establish provisions for the agency to manage both manually and electronically captured 
fingerprints. 

* Establish an agency tracking system (applicant log) using the employee’s name or some 
other method for identifying the individual capturing the fingerprints and verifying the 
applicant’s identity. 
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¢ Establish procedure that documents the type of identification used by the applicant. 
¢ Establish procedures that use specially sealed envelopes, agency specific stamps, etc., for 
the agency to use when forwarding the applicant’s manual fingerprint card. 
¢ Implement the use of forms, which may include the: 
1. Date of fingerprinting, 
2. Reason for fingerprinting, 
3. Printed name, signature, and/or identification number of the employee taking the 
fingerprints, 
. Name of the employee’s supervisor, 
. Supervisor’s signature, 
. Address of agency to receive fingerprints, 
. Name of agency and physical address where fingerprinting was performed, 
. Type of fingerprint capture (i.e. ink, live scan) and, 
. Applicant’s disclosure information. 


OANDHDN FS 


Recording Legible Fingerprints 
Introduction To Recording Legible Fingerprints 


The FBI’s Integrated Automated Fingerprint Identification System (IAFIS) is the largest biomet- 
ric database of criminals in the world. Clear, legible fingerprints form the foundation of the Finger- 
printing Master File, which continues to grow by approximately 13,000 records each day. Agencies 
submitting fingerprints to the FBI should be aware of the proper procedures for recording finger- 
prints. The following information will assist agencies in obtaining fingerprints that meet FBI stan- 
dards. 


Fingerprint Impression Types 
Type 4 
Rolled impressions are the 10 individually taken fingerprint images rolled from nail to 
nail. The plain impressions are used to verify the sequence and accuracy of the rolled impres- 
sions. 
Type 14 
Identification flat impressions are taken simultaneously without rolling. These are referred 
to as plain, slap, or flat impressions. The individual’s right and left four fingers should be cap- 


tured first, followed by the two thumbs (4-4-2 method). Instituting this finger capture method 
ensures the highest level of fingerprint sequence accuracy. 


Basic Fingerprint Equipment 


Fingerprints can be recorded utilizing the following methods: 
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Standard Fingerprint Card (FD-249 and FD-258) — Use ink to record fingerprint images 
on standard fingerprint cards. 


Live Scan — Fingerprint images can be submitted electronically using a live scan device. 
Electronic fingerprinting equipment should be properly maintained at all times. 
For a list of certified devices, please refer to the FBI Certified Products List at 
www.fbibiospecs.org. 





LOOP 
Ina loop pattern, the ridges 
enter from either side, re-curve, 
and pass out or tend to pass out 
the same side they entered. 


Fingerprinting Process 








WHORL ARCH 
Ina whorl pattern, the ridges In an arch pattern, the ridges 
are usually circular. enter from one side, make a rise 
in the center, and exit generally 
on the opposite side. 


1. The recommended height for recording legible fingerprints is approximately 39 inches from 
the floor. This allows the forearm of an average adult to be parallel with the floor. This is the 
recommended position to record fingerprints. 

a. Soap and water are preferred; however, rubbing alcohol may be substituted. 

b. If hands are moist, wipe each finger with rubbing alcohol. If hands are dry or flaky 
use a small amount of hand lotion and wipe off any residue. 

c. If capturing fingerprints electronically, ensure the live scan fingerprint device is prop- 
erly calibrated and the platen is free of dust, dirt, and any residual fingerprint images. 

2. The individual’s hands should be cleaned prior to printing. 

3. Instruct the individual to look away from the fingerprint device, not to assist in the fingerprint 
process, and to relax. Grasp the individual’s right hand at the base of the thumb with your 
right hand. Cup your hand over the individual’s fingers, tucking under those fingers not being 
printed. Guide the finger being printed with your left hand. 

4. If using the ink and paper method, roll the finger on the inking plate or pad so the entire fin- 
gerprint pattern area is evenly covered with ink. The ink should cover from one edge of the 
nail to the other and from the crease of the first joint to the tip of the finger. Using the correct 


amount of ink is vital. 
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5. When taking the rolled impression, the side of the finger bulb is placed upon the card or plat- 
en. The finger is then rolled to the other side until it faces the opposite direction. Care should 
be exercised so the bulb of each finger, from tip to below the first joint, is rolled evenly. Gen- 
erally, the weight of the finger is the maximum pressure needed to clearly record a fingerprint. 
In order to take advantage of the natural movement of the forearm, the hand should be rotated 
from the more difficult position to the easiest position. This requires the thumbs be rolled to- 
ward and the fingers away from the center of the individual’s body. Roll each finger from nail 
to nail in the appropriate space, taking care to lift each finger up after rolling to avoid smudg- 
ing. 

6. When using the ink and paper method and a rolled impression is not acceptable, you may use 
an adhesive retab to cover the fingerprint in its space. (Only two retabs can be applied to each 
fingerprint block.) For live scan, the image should be deleted and retaken. 

7. For a Type 4, plain impressions are typically printed last. The technician simultaneously 
presses the individual’s four fingers (of the right hand), keeping the fingers together on the 
surface of the card or live scan device (at a 45-degree angle) to capture all four fingers in the 
allotted space. Repeat this process for the left hand and then print both thumbs. Type 14 cap- 
ture protocol requires the technician to simultaneously press the individual’s four fingers on 
the surface of the live scan device at a 90-degree vertical angle. Care should be taken to cap- 
ture all fingers in the allotted space. Repeat this process for the left hand and then print both 
thumbs simultaneously (4-4-2 method). Capturing all fingers and thumbs in a vertical position 
improves finger segmentation software accuracy. 

8. Complete all required textual information. It is important to enter the appropriate data in all 
fields when known. 


Special Circumstances 


Deformed or missing fingers: 


If the finger is deformed, every attempt should be made to record the fingerprint in both the 
rolled and plain impression blocks. A postmortem kit, which is more commonly known as a spoon, 
can be utilized to assist in recording these images. If unable to record the image, simply place a no- 
tation in the fingerprint block (deformed, webbed) or electronically apply the Unable to Print (UP) 
code in data field 2.084. 

Missing fingers are fingers physically present but cannot be recorded at the time of capture due 
to injury. Each missing finger should be designated via a notation in the fingerprint block (bandaged, 
injured, crippled, paralyzed) or electronically apply the UP code in data field 2.084. 


Fully amputated fingers: 
An amputated finger occurs when the finger’s first joint is no longer physically present. Ampu- 


tated fingers should be designated via a notation in the fingerprint block (amp, missing at birth, sev- 
ered) or electronically apply the amputated (XX) code in data field 2.084. 
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Tip-amputated fingers: 


If a portion of the first joint is present, record the available fingerprint pattern area in both the 
rolled and plain impression blocks. 


Extra fingers: 


When fingerprinting an individual with an extra finger, record only the thumb and the next four 
fingers. Do not record the extra finger as either a rolled or plain impression. 


Scarred fingers: 
Record scarred fingers in both the rolled and plain impressions without a notation. 
Worn fingerprints: 


An individual, by the nature of their work or age, may have very thin or worn ridges in the pat- 
tern area. Apply light pressure and use very little ink to record these types of fingerprint impressions. 
A technique known as “milking the finger” can be used to raise the fingerprint ridges prior to print- 
ing. This technique involves applying pressure or rubbing the fingers in a downward motion from 
palm to fingertip. 


How To Use The Fingerprint Spoon 


1. Place a fingerprint card strip in the fingerprint card strip holder (spoon). 

2. Using the spatula, ink the finger (starting with the right hand) and be sure to apply ink from 
nail to nail. 

3. Place the inked finger on the fingerprint card strip holder (curved area) and press down. Do 
not roll the finger. The curved shape of the hold will serve the same purpose as rolling the fin- 
ger. 

4. Cut out the finger block from the card strip and paste in the corresponding block on the stan- 
dard fingerprint card. 

5. Repeat these steps for each of the remaining fingers. Be sure to record the correct finger in the 
correct finger block. 






Fingerprint Card 
= Strip Holder (Spoon) 


Fingerprint Card Spatula 


Strips aa 





Please note: A strip of fingerprint retabs can be substituted for the fingerprint card strip. 
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Quality Checklist 


To verify that the fingerprint impressions meet the FBI’s requirements, please use the following 
checklist: 


1. Is there a fingerprint impression in each finger block? If there is a 
missing fingerprint impression, is there a reason noted in the fin- 
ger block (amp, missing at birth, unable to print)? 

2. Are the fingerprints rolled fully, from nail to nail? 

3. If the fingerprint impression is a loop, are the delta and core pres- 
ent? 

4. Are the fingerprint impressions clear and distinct? 

5. Are the fingerprint impressions uniform in tone and not too dark 


or light? 
6. Are the four finger impressions and a thumb impression in the 
plan impression block for each hand? DELTA & CORE 
7. Are the rolled fingerprint impressions in the correct finger blocks The delta is the area of the 
when compared to the plain impressions? pattern where there is a 


triangulation or a dividing 
of the ridges. The core is 
the center of the loop. 


Please note: If using live scan equipment to capture fingerprint impres- 
sions, it is important to clean the equipment regularly and calibrate 
routinely per the manufacturer’s guidelines, to ensure the quality and 
integrity of the fingerprint images. 





For more information about recording legible fingerprints visit the FBI website at www.fbi.gov/hq/ 
cjisd/ident.htm. 


MSHP Fingerprint Submission Procedures 


Fingerprint services for the public are available throughout Missouri primarily through law en- 
forcement agencies. In addition to these agencies, Missouri has contracted with an independent ven- 
dor with electronic submission capabilities in order to expedite applicant requests. For best results 
and to minimize rejections of submitted fingerprints, it is recommended that one of the following 
agencies be contacted for assistance with fingerprinting needs. 


¢ The MSHP Public Window is located at General Headquarters Annex Building, 1510 East 
Elm Street, in Jefferson City, Missouri, and is open to the public Monday through Friday from 
8 a.m. to 5 p.m. daily. State and federal holidays are observed; therefore, record checks will 
not be available on those days. Requests submitted in person at the Patrol’s Public Window for 
a Missouri state search based on personal identifiers (name-based) or fingerprints can be pro- 
cessed within approximately 30 minutes. In addition to the Patrol’s Public Window for finger- 
printing needs, there are nine MSHP troop locations that may assist with fingerprint needs for 
manual submission. Fingerprints must be taken on the FBI standardized applicant fingerprint 
card (FD-258). 
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* County sheriff departments and local police departments throughout the state of Missouri may 
also assist the public with fingerprint needs. Although several law enforcement agencies have 
access to a live scan (electronic) devices, they are not permitted to transmit applicant back- 
ground checks for the public, unless the request is for a conceal and carry endorsement or for a 
registration requirement of a convicted sex offender. The law enforcement agency may use the 
live scan device in lieu of ink fingerprinting to capture the required information; however, the 
card must be printed and the applicant must mail the card with appropriate fees to the MSHP. 

¢ The Missouri Applicant Processing Services (MOAPS) is a partnership of the Missouri State 
Highway Patrol CJIS Division and the vendor, L-1 Identity Solutions L-1 Enrollment Services 
(L-1). The partnership with L-1 began in April 2005 after the Missouri competitive bid process. 
When utilizing the fingerprint services offered through MOAPS, state, or state and federal (as 
authorized) fingerprint-based background requests are transmitted electronically from the ven- 
dor to the MSHP for processing. The fingerprint technicians for MOAPS are located throughout 
the state and provide a fast and efficient manner of submitting applicant fingerprint requests. 
With the capability of submitting electronically, the time required to process and receive the re- 
sults is approximately 5-10 business days. 


Fingerprint Card (FD-258) And Fees 


¢ State Fee, pursuant to Section 43.530 RSMo. The current state fee is $20.00 per applicant sub- 
mission. 

¢ FBI Fee, pursuant to Federal Register. The current FBI fee is $19.25 per applicant submission. 

¢ L-1 (fingerprint vendor through MOAPS): $12.95. 

¢ Ifusing MOAPS, the personal information and fingerprints are captured electronically and 
transmitted to the MSHP for processing. The vendor charges a service fee of $12.95 for each 
applicant submission. Therefore, the state search fee will be $32.95. The fee for a state and fed- 
eral search will be $52.20. All fees are payable to the vendor. A valid photo ID is required at the 
time of fingerprinting. 

¢ If using the Patrol’s Public Window, the personal information and fingerprints are captured 
electronically. The state fee is $20 and the state and federal fee is $39.25. The Patrol does not 
charge the applicant for fingerprinting. All fees are payable at the time of fingerprinting unless 
prior billing arrangements have been made. Valid photo identification is required at the time of 
fingerprinting. 

¢ If mailing fingerprints to the MSHP, the standard fingerprint card (FD-258) must be completed. 
The personal identifying information on the upper portion of the card may be typed or written 
legibly. Rolled impressions of all 10 fingerprints and impressions of all 10 fingerprints taken 
simultaneously (these are sometimes referred to as plain or flat impressions) are placed on 
the lower portion of the card. If possible, the fingerprints should be taken by a fingerprinting 
technician or by law enforcement personnel trained in the proper techniques of taking legible 
fingerprints. Mailed fingerprint cards should be sent to: MSHP, CJIS Division, P.O. Box 9500, 
Jefferson City, MO 65102-9500. Check or money order is required, payable to the “Criminal 
Record System Fund”. The Patrol’s Public Window does not accept credit or debit cards, or 
cash. 

¢ The federal background check, along with the Missouri background check, is only authorized 
by qualified entities. The reason fingerprinted (authorization) must be clearly stated in the 
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“reason fingerprinted” section of the fingerprint card. If the applicant is a volunteer, the word 
“volunteer” must be included next to the appropriate reason fingerprinted. Generally, the reason 
fingerprinted will reference a Missouri state statute or for Missouri VECHS entities, it will ref- 
erence federal legislation, i.e., NCPA/VCA or Adam Walsh Act. 


State And Federal Regulations Regarding The Use Of 
Criminal History Record Information (CHRI) 


The non-criminal justice use of criminal history record information PCR is based on the following 
federal guidelines, where applicable: 





¢ Title 5, United States Code (U.S.C.), Section 552, the Freedom of Information Act, requires the 
records to be accurate, complete, timely, and relevant. 

¢ Title 28, U.S.C., Section 534, authorizes dissemination of CHRI, and provides that access to 
CHRI is subject to cancellation if dissemination is made outside of the authorized recipient. 

¢ Title 5, U.S.C., Section 552a, the Privacy Act, requires that agencies maintain a system of re- 
cords which establish appropriate administrative, technical, and physical safeguards to ensure 
the security and confidentiality of records. 

¢ Title 42, U.S.C., Chapter 140, Subchapter II, Section 14616, the National Crime Prevention and 
Privacy Compact (Compact), established the Compact Council, which is authorized to establish 
rules, procedures, and standards for the use of Interstate Identification Index (II) for non-crim- 
inal justice purposes. Determining compliance includes, but is not limited to, assessing partici- 
pation requirements, the continual maintenance, and the security of CHRI. 

¢ Title 28, Code of Federal Regulations (CFR), 20.30, cites the administration of criminal justice 
shall include criminal identification activities, and the collection, storage, and dissemination of 
CHRI. 

¢ Title 28, CFR, 20.33 (a)(2), authorizes the dissemination of CHRI contained in the III to federal 
agencies authorized to receive it pursuant to federal statute or Executive Order (E.O.) 

¢ Title 28, CFR, 20.33 (a)(3), authorizes the dissemination of CHRI contained in the III for use 
in connection with licensing or employment, pursuant to Public Law (Pub.L.) 92-544, 86 Stat. 
1115, or other federal legislation, and for other uses for which dissemination is authorized by 
federal law. 

¢ Title 28, CFR, 20.33(d), cites that criminal history records received from the III System or the 
FIRS shall be used only for the purpose requested and a current record should be requested 
when needed for a subsequent authorized use. 

¢ Title 28, CFR, 50.12 (b), references the exchange of FBI identification records obtained under 
this authority may be used solely for the purpose requested and cannot be disseminated outside 
the receiving departments, related agencies, or other authorized entities. 

¢ Title 28, CFR, 50.12 (b), references that officials at the governmental institutions and other en- 
tities authorized to submit fingerprints and receive FBI identification records under this au- 
thority must notify the individuals fingerprinted that the fingerprints will be used to check the 
criminal history records of the FBI. 

¢ Title 28, CFR, 50.12 (b), references that the officials making the determination of suitability for 
licensing or employment shall provide the applicants the opportunity to complete, or challenge 
the accuracy of, the information contained in the FBI identification record. These officials also 
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must advise the applicants that procedures for obtaining a change, correction, or updating of 
an FBI identification record are set forth in Title 28, CFR, 16.34. Officials making such deter- 
minations should not deny the license or employment based on information in the record until 
the applicant has been afforded a reasonable time to correct or complete the record, or has de- 
clined to do so. 

Title 28, CFR, Part 906, Outsourcing of Non-criminal Justice Administrative Functions, 
amends the dissemination restrictions of 28 CFR 50.12 (b), by permitting the outsourcing of 
non-criminal justice criminal history record checks to either another governmental agency or 
a private contractor acting as an agent for the authorized receiving agency. Published as a final 
rule on December 15, 2005, this rule also established the standards, entitled the Security and 
Management Control Outsourcing Standard (Outsourcing Standard), that must be followed for 
an agency to outsource these functions. 

Title 28, CFR, Part 906, the Outsourcing Standard, requires contractors to maintain a securi- 
ty program consistent with federal and state laws, regulations, and standards, as well as, rules, 
procedures, and standards established by the Compact Council and the United States Attorney 
General. The Outsourcing Standard identifies the duties and responsibilities with respect to ad- 
equate internal controls within the contractual relationship, so that the security and integrity of 
the III System and criminal history information are not compromised. The security program 
shall include consideration of site security, dissemination restrictions, personnel security, sys- 
tem security, and data security. 

Title 28, CFR, Section 16.34, if, after reviewing his/her identification record, the subject there- 
of believes that it is incorrect or incomplete in any respect and wishes changes, corrections, 

or updating of the alleged deficiency, he/she should make application directly to the agency 
which contributed the questioned information. The subject of a record may also direct his/her 
challenge as to the accuracy or completeness of any entry on his/her record to the FBI, Crimi- 
nal Justice Information Services (CJIS) Division, ATTN: SCU, Mod. D-2, 1000 Custer Hol- 
low Road, Clarksburg, WV 26306. The FBI will forward the challenge to the agency which 
submitted the data requesting that agency to verify or correct the challenged entry. Upon the 
receipt of an official communication directly from the agency which contributed the original 
information, the FBI CJIS Division will make any changes necessary in accordance with the 
information supplied by that agency. 

Title 42, U.S.C., Section 14611-14616, Congress finds that -- (1) both the Federal Bureau of 
Investigation and state criminal history record repositories maintain fingerprint-based criminal 
history records; (2) these criminal history records are shared and exchanged for criminal jus- 
tice purposes through a federal-state program known as the Interstate Identification Index Sys- 
tem; (3) although these records also are exchanged for legally authorized, noncriminal justice 
uses, such as governmental licensing and employment background checks, the purposes for 
and procedures by which they are exchanged vary widely from state to state; (4) an interstate 
and federal-state compact is necessary to facilitate authorized interstate criminal history record 
exchanges for noncriminal justice purposes on a uniform basis, while permitting each state to 
effectuate its own dissemination policy within its own borders; and (5) such a compact will 
allow federal and state records to be provided expeditiously to governmental and nongovern- 
mental agencies that use such records in accordance with pertinent federal and state law, while 
simultaneously enhancing the accuracy of the records and safeguarding the information con- 
tained therein from unauthorized disclosure or use. 


Policy Compliance Review Reference Manual 17 


The non-criminal justice use of criminal history record information PCR is based on the follow- 
ing Missouri Revised Statutes’ (RSMo.) guidelines, where applicable: 


Sections 43.530, 43.532, 43.535, 43.540, 43.543, 43.546, and 43.547 RSMo. (Highway 
Patrol, State); 

Section 67.1818 RSMo. (Political Subdivisions, Miscellaneous Powers); 

Section 168.133 RSMo. (Personnel, Teachers, and Others); 

Sections 210.025, 210.482, 210.487 RSMo. (Child Protection and Reformation); 
Sections 313.220, 313.810 RSMo. (Licensed Gaming Activities); 

Section 571.101 RSMo. (Weapons Offenses); 

Section 590.060 RSMo. (Peace Officers, Selection, Training, and Discipline); and, 
Section 621.045 RSMo. (Administrative Hearing Commission). 


Public Law (Pub.L.) 92-544 


Pursuant to Public Law (Pub.L.) 92-544, the FBI is empowered to exchange identification re- 
cords with officials of state and local governments for purposes of licensing and employment if au- 
thorized by a state statute which has been approved by the Attorney General of the United States. 
The Attorney General’s approval authority is delegated to the FBI by Title 28, CFR, Section 0.85(j). 
The standards employed by the FBI in approving Pub. L. 92-544 purposes have been established by 
a series of memoranda issued by the Department of Justice (DOJ), Office of the General Counsel 
(OGC), Access Integrity Unit (AIU). The standards are: 


The authorization must exist as the result of legislative enactment or its functional 
equivalent; 

The authorization must require fingerprinting of the applicant; 

The authorization must, expressly or by implication, authorize use of FBI records for 
screening of the applicant; 

The authorization must not be against public policy; and, 

The authorization must not be overly broad in its scope and must identify the specific 
category of applicants and/or licensees. 


Additionally, 


The fingerprint submission must be channeled through the State Identification Bureau 
(SIB) for forwarding to the FBI (in Missouri, this is the Missouri State Highway Patrol); 
The states must designate a governmental agency to be responsible for receiving and 
screening the results of the record check to determine an applicant’s suitability for 
employment and/or licensing; 

The results of the record check cannot be released outside the receiving governmental 
department or related governmental agency; and, 

Processing fees are either by direct payment or billed to the SIB (Missouri State Highway 
Patrol) depending on arrangements made between the FBI and the SIB, such as the 
execution of a Memorandum of Understanding (MOU) for billing. 
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Emergency III Name-based Background Checks Approved By The Compact Counsel (Non-User 


Fee) 


Officials of state or local governmental with a child-placement statute approved under 
Pub. L. 92-544 and officials of a federal law enforcement agency for a federal agency 
responsible for the placement of children to conduct background checks on the temporary 
custodian with whom a child is being placed and all adults residing in the home of the 
custodian. (The III name-based checks must be followed by non-criminal justice user-fee 
fingerprint submissions within a time frame specified by the Compact Council.) [Pub. L. 
92-544; Title 28, U.S.C., Section 534, Note; the Compact, Title 42, U.S.C., Section 14611- 
14616; Title 28, CFR, Part 901] 

Officials of the DHS, Federal Emergency Management Agency (FEMA) to conduct 
pre-employment background checks on emergency workers hired by FEMA to assist in 
recovery efforts as a result of national disasters or other catastrophic emergencies. (The 
III name-based checks must be followed by non-criminal justice user-fee fingerprint 
submissions within a time frame specified by the Compact Council.) [Title 28, U.S.C., 
Section 534; E.O. 10450; The Compact, Title 42, U.S.C., Section 14611-14616; Title 28, 
CFR, Part 901] 


Privacy Statement 


The responsibility of notification (authority to collect and potential use of the information) lies 
with the agency collecting the fingerprints. Civil information is often collected on FBI applicant 
cards (FD-258), which are provided to authorized agencies in support of federal criminal history 
checks. The FD-258 fingerprint card is generally used for civil purposes, and the Privacy Act state- 
ment on the back of the card has been updated (June 2, 2010) as follows: 


Authority: The FBI’s acquisition, preservation, and exchange of information requested by this 


form is generally authorized under 28 U.S.C. 534. Depending on the nature of your appli- 
cation, supplemental authorities include numerous federal statutes, hundreds of state stat- 
utes pursuant to Pub.L. 92-544, presidential executive orders, regulations, and/or orders 
of the attorney general of the United States, or other authorized authorities. Examples in- 
clude, but are not limited to: 5 U.S.C. 9101; Pub.L. 94-29; Pub.L. 101-604; and Execu- 
tive Orders 10450 and 12968. Providing the requested information is voluntary; however, 
failure to furnish the information may affect timely completion or approval of your appli- 
cation. 


Social Security Account Number (SSAN): Your SSAN is needed to keep records accurate, be- 


cause other people may have the same name and birth date. Pursuant to the Federal Pri- 
vacy Act of 1974 (5 USC 552a), the requesting agency is responsible for informing you 
whether disclosure is mandatory or voluntary, by what statutory or other authority your 
SSAN is solicited, and what uses will be made of it. Executive Order 9397 also asks fed- 
eral agencies to use this number to help identify individuals in agency records. 
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Principal Purpose: Certain determinations, such as employment, security, licensing, and adop- 
tion, may be predicated on fingerprint-based checks. Your fingerprints and other informa- 
tion contained on (and along with) this form may be submitted to the requesting agency, 
the agency conducting the application investigation, and/or the FBI for the purpose of 
comparing the submitted information to available records in order to identify other in- 
formation that may be pertinent to the application. During the processing of this applica- 
tion, and for as long hereafter as may be relevant to the activity for which this application 
is being submitted, the FBI may disclose any potentially pertinent information to the re- 
questing agency and/or to the agency conducting the investigation. The FBI may also 
retain the submitted information in the FBI’s permanent collection of fingerprints and re- 
lated information, where it will be subject to comparisons against other submissions re- 
ceived by the FBI. Depending on the nature of your application, the requesting agency 
and/or the agency conducting the application investigation also may retain the finger- 
prints and other submitted information for other authorized purposes of such agency(ies). 


Routine Uses: The fingerprints and information reported on this form may be disclosed pursuant 
to your consent, and also may be disclosed by the FBI without your consent as permit- 
ted by the Federal Privacy Act of 1974 (5 USC 552a(b)) and all applicable routine uses 
as may be published at any time in the Federal Register, including the routine uses for the 
FBI Fingerprint Identification Records System (Justice/FBI-009) and the FBI’s Blanket 
Routine Uses (Justice/FBI-BRU). Routine uses include, but are not limited to, disclosures 
to: appropriate governmental authorities responsible for civil or criminal law enforce- 
ment, counterintelligence, national security, or public safety matters to which the infor- 
mation may be relevant; to state and local governmental agencies and nongovernmental 
entities for application processing as authorized by federal and state legislation, executive 
order, or regulation, including employment, security, licensing, and adoption checks; and 
as otherwise authorized by law, treaty, executive order, regulation, or other lawful author- 
ity. If other agencies are involved in processing this application, they may have additional 
routine uses. 


Additional Information: The requesting agency and/or the agency conducting the application 
investigation will provide you additional information pertinent to the specific circum- 
stances of this application, which may include identification of other authorities, purpos- 
es, uses, and consequences of not providing requested information. In addition, any such 
agency in the federal executive branch also has published notice in the Federal Register 
describing any system(s) of records in which that agency may also maintain your records, 
including the authorities, purposes, and routine uses for the system(s). 


Related Agency Doctrine 


The CJIS Security Policy defines “Related Agency Doctrine” as “a legal principal providing for 
the re-dissemination of criminal history record information by an authorized recipient. The doctrine 
applies to agencies or qualified entities that have a commonality of purpose and (typically) congru- 
ent responsibility, authorized by federal statute or executive order, or approved state statute pursu- 
ant to Pub. L. 92-544. Qualified entities authorized to receive the criminal history record information 


20 Policy Compliance Review Reference Manual 





can exchange that information with each other for the authorized purpose originally requested.” The 
agencies must have a unity of purpose and, typically, concurrent regulatory responsibility. 


Penalties For Unauthorized Disclosure 


Title 28, U.S.C., Section 534, Pub. L. 92-544 and Title 28, CFR, 20.33(b), provide that the ex- 
change of records and information is subject to CANCELLATION if dissemination is made outside 
the receiving departments or related agencies. Furthermore, depending upon the nature of the offense 
and the identity of the offender, federal or state crimes may be charged for the willful, unauthorized 
disclosure of CHRI. Depending on the authority to which the CHRI was authorized for dissemina- 
tion, penalties may be different according to the authority. 


Section 43.540 RSMo., makes reference that all criminal history record information is confiden- 
tial and any person who discloses the information beyond the scope allowed is guilty of a Class A 
misdemeanor. 


Agency PCR Preparation 


An auditor with the CJIS Division will be assigned to oversee the agency review process and is 
the point of contact (POC) between the MSHP and the agency during the current review cycle. 


A notification letter along with a questionnaire will be mailed to the agency approximately 45 
- 60 days prior to the estimated on-site PCR. The agency should review, complete, and return the 
questionnaire to the CJIS Division in a timely manner. The information provided from the completed 
questionnaire will assist the auditor in ascertaining the internal processes of the agency regarding the 
use, dissemination, maintenance, destruction, and security of the criminal history record information 
provided to the entity. Upon receipt of the questionnaire, the auditor reviews and contacts the agency 
POC to schedule an on-site PCR. It is important to note that any specific areas that an agency may 
wish to address during the PCR process should be conveyed to the auditor during this time. The au- 
ditor has the flexibility to alter the process at this point in order to address various CHRI-related con- 
cerns and/or questions from the agency. 


Agency Administrative Interview (On-Site Visit 





During the administrative interview, the auditor will meet with the agency POC and review the 
responses provided on the questionnaire. Generally, any concerns or points of interest that the audi- 
tor may need addressed will be covered during this time. 


The following topics are discussed during the PCR: 
1. Point of Contact 
2. Use of criminal history information 


* Legal authority; 
¢ Fingerprint submission information; 
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3. Dissemination of criminal history record information 
* Outsourcing; 
* User Agreement, if applicable; 
¢ Waiver Agreement and Statement, if applicable. 
4. Security of criminal history record information. 
¢ Physical security 
¢ Personnel (personnel having access to CHRI) 
5. Maintenance of criminal history record information 
6. Destruction process, if applicable, of criminal history records 


Agency Criminal History Record Review 


The auditor reviews a predetermined random number of CHRI received by an agency based on 
a Statistical sampling method. The auditor will document each discrepancy found during the CHRI 
quality review, if any, using a standard record form. 


Examples of error types include: 


1. Unauthorized — CHRI should not have been requested and/or received — no substantiating 
documentation as to employment or volunteer status, dissemination error, 
disseminated or shared with unauthorized entities. 

2. Unsecured — CHRI filed or maintained in a non-secure location. 

3. Undocumented — CHRI missing, dissemination log missing, waiver missing. 


Agency Exit Briefing 


The purpose of the exit briefing is to present a summary of findings to the agency at the conclu- 
sion of the PCR. The agency POC or other designated agency representative must be present for the 
exit briefing. The summary will be an overview of the general findings of the review and should not 
be considered the official outcome of the PCR. Any communications between the agency POC and 


auditor during the summary exit briefing will be well documented for inclusion into the official find- 
ings. 


The official findings and recommendations will be compiled upon the auditor’s return. Generally, 
the final PCR results will be mailed to the agency POC within 30 days after the on-site visit. All dis- 
crepancies noted by the auditor, along with cumulative and discrepancy totals, will be included. The 
agency will have an opportunity to review the audit findings and either agree or disagree. 


Each agency satisfying the state compliance standards will be scheduled for future PCRs on a tri- 
ennial basis. 


If an agency has failed compliance standards, a follow up PCR will be conducted within 30 to 90 
days of the initial PCR. The follow up PCR will include a new sampling of records and will gener- 
ally address the previous areas of non-compliance. 
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PCR Survey Form 


Along with the final report, the agency will receive a PCR survey form. The survey form pro- 
vides the agency with the opportunity to rate the PCR process and provide any suggestions or com- 
ments. The completion of the survey will assist the CJIS Division in accomplishing the following 
goals: 


¢ Obtain information and/or opinions from the evaluated agency of the PCR process. 

¢ Establish and maintain a line of communication between MSHP and non-criminal justice 
entities/agencies regarding CHRI. 

* Identify areas in the PCR process that may need improvement. 
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ACRONYMS 


CFR Code of Federal Regulations 

CHRI Criminal History Record Information 

CJIS Criminal Justice Information Services 

FBI Federal Bureau of Investigation 

FIRS Fingerprint Identification Record System 

GAGAS Generally Accepted Government Auditing Standards 
IAFIS Integrated Automated Fingerprint Identification System 
Il Interstate Identification Index 

MSHP Missouri State Highway Patrol 


MOAPS Missouri Applicant Processing Service 
MOVECHS Missouri Volunteer and Employee Criminal History Service 
MULES Missouri Uniform Law Enforcement System 


NCIC National Crime Information Center 
NCPA National Child Protection Act 
NGE NonGovernmental Entity 

OCA Originating Case Agency 

ORI Originating Agency Routing Identifier 
PCR Policy Compliance Review 

POC Point Of Contact 

QE Qualified Entity 

RSMo Revised Statutes of Missouri 

USC United States Code 

VCA Volunteers for Children Act 
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SHP-175A 09/09 


MISSOURI STATE HIGHWAY PATROL 
POLICY COMPLIANCE REVIEW 
AGENCY QUESTIONNAIRE 


DATE ORI AND / OR OCA 











AGENCY NAME 





MAILING ADDRESS 


CONTACT INFORMATION 
NAME OF AGENCY POINT OF CONTACT (POC) PHONE NUMBER 





TITLE E-MAIL ADDRESS 








NAME OF PERSON RESPONSIBLE FOR THE ADMINISTRATIVE AUTHORITY OVERSIGHT / MANAGEMENT OF AGENCY 





TITLE 





NAME OF PERSON RESPONSIBLE FOR THE DAILY OPERATIONS OF THE AGENCY 





TITLE 


USE OF CRIMINAL HISTORY INFORMATION 


1. Under what authority does your agency access state and national criminal history record information? (For example: state and / or federal 
legislation) 





2. Are fingerprints taken directly by your agency? If NO, what agency or private contractor takes the fingerprints? 


[|] ves [_] no 


3. Does your agency or other agency require photographic or other personal identification prior to taking fingerprints? 


[ |] ves [_] no 


If NO, how does your agency or other agency determine the individual fingerprinted is the same individual applying for job / license and / or benefit? 














4. |f another agency takes fingerprints for your agency, who sends the fingerprint submission to the Missouri State Highway Patrol (MSHP)? 





5. Does your agency ensure state and national criminal history information is only used for the official purpose of the request? 


[ |] ves [_] no 


Please explain your answer. 
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Policy Compliance Review — Agency Questionnaire 
Page 2 of 5 


DISSEMINATION OF NATIONAL CRIMINAL HISTORY INFORMATION 


1. Does your agency outsource criminal history record information to another agency? 


[ ] yes [_] no 


If YES, what portion(s) of the criminal history information is outsourced? (For example, criminal history record screening, destruction, retention / 
maintenance) 


If YES, please list agency(s) to which criminal history information is outsourced, under what authority granted and duties performed. 





2. Does your agency have a signed copy of User Agreement on file? 


[] ves [] no [] NA 











3. Is criminal history disseminated to a non-related agency? If YES, to whom? 

[] yes L] no [] NA 

4. Is criminal history disseminated to the subject of record? If YES, is positive identification required before record is released? 
[] ves [.] no [] NA [_] ves [_] no 





5. Does your agency log the dissemination (secondary dissemination) of national criminal history record information? 


[ ] ves [_] no 


If a log is not maintained, how is the dissemination tracked? 








6. How is criminal history record information disseminated to the subject of record or to a related governmental or authorized entity? 


Eq Standard Mail fd Courier Service ES] Electronic Mail [3] Facsimile [] Hand Carried [ ] Internet 
7. What security methods are in place for the physical transfer of the criminal history information? 





MAINTENANCE OF CRIMINAL HISTORY RECORD INFORMATION 


1. Does your agency retain a hard copy of criminal history information? 


[] yes [.] no [_] na 


If YES, where are the criminal history record information hard copy printouts maintained? 


If YES, how long retained? 
If YES, where retained? 


If YES, who has access? 





2. Does your agency retain criminal history record information data in an electronic format? 


[ ] ves [.] no [] na 


If YES, is the information retained in a secure manner? (Password protected, separate from other computer systems, etc.) 


If YES, does the electronic format contain the: 
@ Identity of the subject / provider? [ | YES [ | NO [ | N/A 


@ Information such as dates of birth and FBI numbers? [] YES [] NO [] N/A 
If YES, does the system maintain an audit trail of the dissemination of the records? 


[] ves [.] no [.] Na 
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Policy Compliance Review — Agency Questionnaire 
Page 3 of 5 





3. How is the electronic information used? 





4. Is the electronic format monitored to prevent unauthorized access? 





5. Does your agency have procedures regarding: 


Record Storage? [| YES [| NO [| N/A 
Explain procedures / policy: 


Retention of Records? [| YES [| NO [ ] N/A 
Explain procedures / policy: 


Disposal / Destruction of the Records? [] YES [=] NO Ee] N/A 
Explain procedures / policy: 


PHYSICAL SECURITY 


SECURITY OF CRIMINAL HISTORY RECORD INFORMATION 





1. Name of person responsible for physical security of the criminal history record information. 


Title 





2. When retention of criminal history record information is no longer required, what is the method of disposal? (shredded, burned, etc.) 





2a. What personnel are responsible for III (FBI) record disposal? 


Agency [] ves [.] no [.] na 
Contract [ ] YES [ ] NO [] N/A 
Other (list) [] YES [] NO [] N/A 











2b. If contract personnel are responsible for record disposal, is disposal accomplished under the immediate supervision of agency personnel? 


[] yes [.] no [] NA 





3. If criminal history record information is maintained in an electronic format, does your agency ensure all data (diskettes, tape cartridges, ribbons, 
etc.) are destroyed when no longer needed? 


[ ] yes L] no |] NA 








4. How is physical access to criminal history information controlled? 





PERSONNEL SECURITY 





1. Does your agency ensure the disclosure of a record only to employees that need to review / research the records in the performance of their 
duties? 


[| YES [ ] NO [ | N/A _ Please explain your answer. 





2. What type of personnel screening is conducted prior to access to criminal history information? 
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Policy Compliance Review — Agency Questionnaire 
Page 4 of 5 
3. What does the screening include? 








4. If there is no screening, how does the agency determine personnel access to criminal history information? 





5. Does your agency have a written policy regarding disciplinary action for misuse of criminal history information? 


[] yes [.] no [.] NA 


If YES, what are the disciplinary actions? 


If NO, what safeguards has the agency adopted to ensure security and confidentiality of records? 


WAIVER AGREEMENT AND STATEMENT 
(MOVECHS and Adam Walsh Program Agencies) 
Does your agency retain a hard copy of the waiver agreement and statement on each request for criminal history record information on a potential 
and/or current employee or volunteer? 


[] yes L.] no [.] NA 


If YES, where is the waiver hard copy maintained? 
If YES, how long retained? 


If YES, who has access? 


TRAINING 


1. Has your agency received any type of training on the use, dissemination, maintenance, and security of criminal history record information? 


[|] ves [.] no [.] na 


2. Describe any training programs made available to your agency. 








3. If you have any questions about criminal history information, whom do you contact for clarification and assistance? 
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Policy Compliance Review — Agency Questionnaire 
Page 5 of 5 


AUDIT 


. Has the state (MSHP) audited your agency for its use of criminal history record information? 


4 yes [_] No [_] NA 


If YES, when was the last audit performed? 





2. Does your agency have a copy of the audit results? 


[] ves [.] no [] na 





3. If an area of concern was discovered, did the state follow-up? 


[ ] ves [.] no [] na 


If YES, explain the area of concern and if it was resolved. 





4. Does the MSHP audit personnel offer an open line of communication for questions and assistance? 


[ ] ves [.] no [] na 


If NO, explain why. 





5. Is your agency made aware of new or pending information that may affect the use of criminal history record information? 


[ ] ves [.] no [] nwa 





6. Within your agency, how do you ensure that appropriate persons are familiar with relevant information? 





Please return completed questionnaire to: Missouri State Highway Patrol, Criminal Justice Information Services Division, Attn: Mr. 
Kerry Creach, P. O. Box 9500, Jefferson City, MO 65102-9500. 
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LEAVE BLANK TYPE OR PRINT ALL INFORMATION IN BLACK EB! LEAVE BLANK 
E 


LAST NAME NAM FIRST NAME MIDDLE NAME 
APPLICANT 


SIGNATURE OF PERSON FINGERPRINTED ALIASES AKA ° 






RESIDENCE OF PERSON FINGERPRINTED 


Dco0B000z 
CJIS-WV-SCU-D2 
CLARKSBURG, WY OE 


CINZENSHIP CTT Ta PACE OF BIRTH POB 
DAT ATURE OF OFFICIAL (] i] RPRI: 
YOUR NO. 
EMPLOYER AND ADDRESS 
ARMED FORCES NO. MNU mhers 
REASON FINGERPRINTED 
SOCIAL SECURITY NO. 
” 


MISCELLANEOUS NO. MNt J 





1. R. THUMB 


6.1. THUMB 7._L. INDEX 


LEFT FOUR FINGERS TAKEN SIMULTANEOUSLY L. THUMB R. THUMB RIGHT FOUR FINGERS TAKEN SIMULTANEOUSLY 


The FBI Criminal Justice Information Services Division will accept the downloaded paper fingerprint 
card only for the purposes of requesting an FBI Identification Record through Departmental Order 
556-73. If you go to a law enforcement agency or private fingerprinting agency to be fingerprinted, 
they may prefer to use a fingerprint card on standard card stock. You may use the fingerprint card 
provided by the fingerprinting agency. 
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‘annenrere aunnnnECaeL DATE OF SECONDARY DISSEMINATION 
CHRI SECONDARY DISSEMINATION RECORD 


INSTRUCTIONS 


MEMBERS: Submit completed report to headquarters which originally provided CHRI, whenever CHRI is released to an official outside the Patrol, 
such as a prosecuting attorney or sheriff. CHRI MAY BE DISSEMINATED ONLY TO CRIMINAL JUSTICE AGENCIES OR OFFICIALS. 
If the CHRI will be copied and disseminated to more than one officer or agency, this form should be copied, completed, and submitted 
on EACH secondary dissemination. 


TROOP HQ: File reports by the date of the secondary dissemination shown in the top right corner. Reports may be destroyed after 13 months. 
INFORMATION ABOUT ORIGINAL CHRI REQUEST 
ROOP 


DATE REQUESTED 


DOB SID # (OR FBI # IF NO MO SID #) 


INFORMATION ABOUT SECONDARY CHRI DISSEMINATION 


PERSON RECEIVING CHRI (LAST, FIRST, Ml) PURPOSE 
AGENCY NAME SIGNATURE OF MEMBER RELEASING CHRI 
AGENCY ADDRESS 





SHP-432 = 6/91 


NOTE: This form is provided as a sample which may be used “as is” to document any 
secondary dissemination made by your agency. A copy is to be retained in the agency file 
until the agency has received a successful Policy Compliance Review from The MSHP. 


Violations and associated penalties for misuse of dissemination practices are stated 
in Section 43.532 RSMo. and Title 18, United States Code. 
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(OL/SO)ESt-do 





ONC] s®A [] 





ONE] SsoA im 





ONT] S°A F] 





ONE] S9°A EF] 





ONC] s8?A [ 





ONC] S84 [] 





ONC] S84 [] 





ONC] S84 [] 





ONC] S84 [] 





ONE] SoA im 





ONE] S84 CF] 





ONE] S9°A EF] 





ONE] S9°A FE] 





ONC] S84 [] 





ONC] S84 [] 





ONC] S84 [] 





ONC] S84 [] 





ONC] SoA im 





ONE] S84 CJ 





ONE] S9°A EF] 





ONE] S9°A EF] 





ONC] S84 [] 








ONC] S84 [] 





uolssiwqns 
juudsabuy 
PSleA 
OUM J84JOM GOD 





peyiwiqns 
sjulid 
-seBuly 
3yeq 





juaweoe|d 
ou 
JO} uoseay 





apew 
JUSWSI|q 





# 8SED |I2ED 





Jaysenbey qo 





Jaubls 37 





aXe 
‘Ben 





Xn 


"SOd 





god 





aweN 











907 LSANDSY «X;, IGOD ASOdYNd 


NOISIAIG S.NSYCTIHO 


SHOIAYAS WIDOS AO LNAWLYVd3sd INNOSSIN 
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SHP-174A 09/09 
MISSOURI STATE HIGHWAY PATROL 
POLICY COMPLIANCE REVIEW 
(Non-Criminal Justice Use of State and National CHRI) 
AGENCY SURVEY 





DATE AGENCY NAME 








Please use the following scale to rate each statement below and check the most appropriate response: 
5 = Strongly Agree 
4 = Agree 
3 = Neither Agree or Disagree 
2 = Disagree 
1 = Strongly Disagree 





PRE-REVIEW PREPARATION 





1. The initial contact call to your agency conveyed what to expect during the review and gave you an understanding of the policy compliance review 


process. q ; q ; q : q : Oo: 





ADMINISTRATIVE INTERVIEW 





2. The information obtained during the administrative interview was appropriate in attaining an understanding of your agency’s compliance. 


[]5 []4 []3 [ ]2 []1 





3. The auditor effectively communicated with your staff and offered guidance, where necessary, throughout the review process. 


L]s5 [ ]4 [ ]3 []2 [ |1 











CRIMINAL HISTORY RECORD INFORMATION (CHRI) QUALITY REVIEW 





4. The Criminal History Record Information (CHRI) review assisted your agency in identifying proper methods of receipt, retention and dissemination 
of criminal history record information. 


[]s5 []4 [ ]3 [ ] 2 [ |4 





5. The CHRI review assisted your agency in identifying areas of consideration for training. 


L]s5 L]4 L]3 L] 2 C1 











EXIT BRIEFING AND POST REVIEW 





6. The auditor demonstrated courtesy, flexibility, professionalism, and a constructive and positive approach. 


[els L]4 L]3 [J 2 C1 





7. The auditor effectively addressed any discrepancies identified during the review and also discussed areas of exceptional work with the agency. 


Lis L]4 L] 3 L]2 me 





ADDITIONAL INFORMATION 





8. What part of the Policy Compliance Review was most beneficial for your agency? 





9. What part of the Policy Compliance Review was least beneficial for your agency? 





ADDITIONAL COMMENTS 








Please return survey to: 

Missouri State Highway Patrol 
Criminal Justice Information Services Division 
Attn: Mr. Kerry Creach, Sr. CJIS Manager 
P.O. Box 9500 
Jefferson City, MO 65102-9500 
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Questions pertaining to the Missouri PCR program or comments regarding the information 
contained within this document may be directed to: 


Missouri State Highway Patrol 
Criminal Justice Information Services Division 
1510 E. Elm Street 
P. O. Box 9500 
Jefferson City, MO 65102-9500 
Telephone Number: (573) 526-6345 
Fax Number: (573) 751-9382 


SHP-185 B 10/2011 


